This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json) Hash identifier: A8UOrtL6mZbr+XoU5eBG4ssRrNB3Mo/lvcfFE9GDfF8= Subject key identifier: E5:13:EF:7A:D1:59:4C:D6:DA:DF:2C:16:BA:6A:47:28:73:56:EC:72 Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e Certificate serial: 019B533C83B7FCF88C3BAF4056DB5FFBCF23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft Manifest number: 1187 Signing time: Thu 25 Dec 2025 02:00:33 +0000 Manifest this update: Thu 25 Dec 2025 02:00:33 +0000 Manifest next update: Fri 26 Dec 2025 02:00:33 +0000 Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: kPemuUwc7ejCxoc7uzo8fG1PucvFUAEMuPFyU0benjk=) 2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:83:b7:fc:f8:8c:3b:af:40:56:db:5f:fb:cf:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e Validity Not Before: Dec 25 02:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=e513ef7ad1594cd6dadf2c16ba6a47287356ec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c0:8b:f8:14:25:47:68:63:cf:17:d8:75:a1: 1a:20:07:7f:49:6b:98:e8:14:11:a0:3f:6b:22:0c: 25:47:0f:a9:e8:53:52:10:aa:46:4d:d8:42:d1:2f: b4:82:2c:d7:01:9d:88:ea:9a:48:57:dd:f5:3d:40: be:80:6e:d9:d7:a7:9e:a7:3a:eb:9f:7b:f5:45:9e: bc:dd:b3:5f:93:3c:e0:5d:69:e6:1c:d7:01:82:09: 72:ec:d4:9f:1a:b9:0a:42:57:d4:c9:3b:a1:00:a8: a3:88:4c:5b:0f:d1:f7:a7:73:31:47:d3:9c:39:fd: 01:dc:27:f7:07:6f:28:7b:f8:61:22:4e:4d:e8:5c: 5a:dc:9e:b2:d6:e4:71:4c:2c:82:a0:10:f2:63:c9: 21:95:16:3c:13:f7:aa:c5:b6:82:fc:9d:53:3e:07: 83:14:89:06:8d:a8:97:92:9b:d5:e7:10:43:d5:80: a3:d5:23:42:4d:b7:31:a6:19:6b:62:f3:fa:9c:02: 59:09:f2:7c:77:3c:e6:2f:1d:f3:8e:46:9f:b0:4a: e2:1d:f1:fd:2c:cc:04:ae:52:58:e5:0e:e0:44:c1: a8:0b:be:96:22:0d:bb:f9:e2:07:dd:c8:43:1d:cb: d0:96:ff:df:fa:67:7d:2e:d8:c4:11:4f:12:b9:1b: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:13:EF:7A:D1:59:4C:D6:DA:DF:2C:16:BA:6A:47:28:73:56:EC:72 X509v3 Authority Key Identifier: keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ae:31:69:b2:c7:9d:2f:68:cc:a5:fa:42:80:52:29:89:c6: 1e:92:d0:f4:ae:64:ec:1a:0c:c3:e1:f4:57:b1:31:a4:00:b6: 5c:05:2d:d1:06:b4:30:70:00:8b:09:a6:65:d6:f4:9a:8c:87: 63:f3:9c:36:44:ab:69:53:f0:6b:17:86:70:ae:b6:e4:6f:5c: 1d:79:9c:1b:91:96:0c:97:d2:bf:87:e4:a3:b2:dd:da:90:70: 04:5d:68:c0:c8:75:68:18:b5:d7:c5:fc:ef:5a:e6:22:92:f7: 45:a6:c5:e1:15:1f:57:da:94:10:45:29:6a:fb:e7:b1:59:39: 09:54:87:7c:b7:1f:d7:4d:86:d1:36:1a:08:6a:50:8d:4b:cc: 0c:8b:a7:9c:7d:7b:92:de:61:5b:1a:3c:2b:0c:ee:1d:b9:f5: 45:b1:f0:f8:f4:5c:6c:da:00:ad:52:04:c3:f0:65:1a:5c:a2: f3:5b:96:0b:5b:7d:1b:61:53:74:65:97:08:ae:a0:53:7f:55: d9:fe:6f:1c:e5:76:82:5c:51:70:09:b9:d0:c0:80:28:a7:09: 6c:1b:e4:ca:cb:31:b3:95:74:6f:aa:e0:fd:d0:4b:d9:84:8b: 84:df:55:35:73:78:43:5e:52:43:fc:7c:74:c7:ce:90:91:ce: 29:9d:d5:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPIO3/PiMO69AVttf+88jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm MTM3MGUwHhcNMjUxMjI1MDIwMDMzWhcNMjUxMjI2MDIwMDMzWjAzMTEwLwYDVQQD EyhlNTEzZWY3YWQxNTk0Y2Q2ZGFkZjJjMTZiYTZhNDcyODczNTZlYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sCL+BQlR2hjzxfYdaEaIAd/SWuY 6BQRoD9rIgwlRw+p6FNSEKpGTdhC0S+0gizXAZ2I6ppIV931PUC+gG7Z16eepzrr n3v1RZ683bNfkzzgXWnmHNcBggly7NSfGrkKQlfUyTuhAKijiExbD9H3p3MxR9Oc Of0B3Cf3B28oe/hhIk5N6Fxa3J6y1uRxTCyCoBDyY8khlRY8E/eqxbaC/J1TPgeD FIkGjaiXkpvV5xBD1YCj1SNCTbcxphlrYvP6nAJZCfJ8dzzmLx3zjkafsEriHfH9 LMwErlJY5Q7gRMGoC76WIg27+eIH3chDHcvQlv/f+md9LtjEEU8SuRsf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUT73rRWUzW2t8sFrpqRyhzVuxyMB8GA1UdIwQY MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt MDNhZmFjZWE3MDEwLzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq4xabLH nS9ozKX6QoBSKYnGHpLQ9K5k7BoMw+H0V7ExpAC2XAUt0Qa0MHAAiwmmZdb0moyH Y/OcNkSraVPwaxeGcK625G9cHXmcG5GWDJfSv4fko7Ld2pBwBF1owMh1aBi118X8 71rmIpL3RabF4RUfV9qUEEUpavvnsVk5CVSHfLcf102G0TYaCGpQjUvMDIunnH17 kt5hWxo8KwzuHbn1RbHw+PRcbNoArVIEw/BlGlyi81uWC1t9G2FTdGWXCK6gU39V 2f5vHOV2glxRcAm50MCAKKcJbBvkyssxs5V0b6rg/dBL2YSLhN9VNXN4Q15SQ/x8 dMfOkJHOKZ3VTA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:05 2025 by rpki-client